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IN THE CLAIMS 



Please amend the claims as follows: 



[[4.]] L 



(Currently Amended) A method for operating a conditional access system for 



broadcast applications, said conditional access system comprising a number of subscribers, each 
subscriber having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (C w ), said first key (Cw) 
being changed at a high rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, said 
ECM's comprising the first keys (Cw) encrypted using a service key (Pj), wherein entitlement 
management messages (EMM's) are sent to the secure device providing the service key (Pj) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys required to obtain the first keys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein search EMM's are sent to at least a part of the terminals, said search EMM's 
providing at least the service key (Pt) and a dummy key (Pdi or Pd2), at least the search EMM's 
comprising identifiers identifying the keys (P T and P D i or P D 2), wherein first search EMM's with 
the keys (Pj and Pdi) are sent to a first part of the terminals and second search EMM's with the 
keys (P T and P D 2) are sent to a second part of the terminals, wherein an ECM identifying the 
service key (Pt) to be used to decrypt the encrypted first key (Cw), is sent to all secure devices 
just before the first key (Cw) is needed to decrypt the source signal. 

[[5.]] 2. (Currently Amended) A method according to claim 1, wherein the encrypted 
source signal comprises a stream of data packets, wherein successive groups including at least 
one data packet, are encrypted using successive first key (Cwi , Cw2, • • - , Cwi, • . . ,Cw n ), each data 
packet having a flag indicating the first key (C W i) to be used for decrypting the data packet, 
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wherein in stead of an ECM identifying the service key (Ft) an ECM identifying a dummy key 
(Pdi or P D 2) to be used id e ntifying a dummy key (Cm ), to decrypt a next encrypted first key 
{Cwi}, is sent to the secure devices of the first and second parts of the terminals, respectively, just 
before the first key (Cwi) is needed to decrypt the source signal, whereas the data packet is 
encrypted using the previous first key (Cwi-i). 

[[6.]] 3. (Currently Amended) A method according to claim 1, wherein a set of search 
EMM's is sent to the terminals, each search EMM providing two keys (P T and P D i, PT and 
Pd2,... 5 Pt and P^). 

4. (Currently Amended) A method for operating a conditional access system for broadcast 
applications, said conditional access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (C w ), said first key (C w ) 
being changed at a high rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, said 
ECM's comprising the first keys (Cw) encrypted using a service key (P T ), wherein entitlement 
management messages (EMM's) are sent to the secure device providing the service key (Pt) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys required to obtain the first keys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein a set of search EMM's is sent to at least a part of the terminals, each search EMM 
of the set comprising a different dummy key (P D ) and each EMM being sent to a different part of 
the terminals. 
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5. (Previously Presented) A method according to claim 3, wherein the terminals are divided 
into groups, wherein in a first search step the number of search EMM's of the set of search 
EMM's corresponds to the number of groups. 



6. (Currently Amended) A method for operating a conditional access system for broadcast 
applications, said conditional access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (Cw), said first key (Cw) 
being changed at a high rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, said 
ECM's comprising the first keys (Cw) encrypted using a service key (Pt), wherein entitlement 
management messages (EMM's) are sent to the secure device providing the service key (Py) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys required to obtain the first keys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein the source signal or the ECM's are encrypted using a multiple-key or secret- 
sharing cryptographic algorithm having a plurality of different decrypting keys or shares (C;;Pi) 
required for decrypting the encrypted source signal or ECM's respectively, wherein said plurality 
of different decrypting keys or shares (Q;Pi) are sent to at least a part of the terminals such that 
different terminals or groups of terminals receive different keys or shares (C;;Pi) according to a 
predetermined distribution. 

7. (Previously Presented) A method according to claim 1 , wherein the distribution of the 
terminals in groups of terminals is varied to trace the cracked secure device. 
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8. (New) A method according to claim 4, wherein the distribution of the terminals in 
groups of terminals is varied to trace the cracked secure device. 



9. (New) A method according to claim 6, wherein the distribution of the terminals in 
groups of terminals is varied to trace the cracked secure device. 



